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Description 

Method for detecting calls and corresponding units 

5 The invention relates to a method in which a call request is sent 
from a calling terminal device by way of a signaling unit to a 
called terminal device in order to enable a data transmission 
between the terminal devices. User data is then transmitted between 
the calling terminal device and the called tenninal device, call 

10 data for example. For example, a detection request is sent to the 
signaling unit from the called terminal device during the data 
transmission or in conjunction with the signaling relating to the 
data transmission. For example, on the basis of the detection 
request the signaling unit notes an identifier for the calling 

15 terminal device, for example the identifier is saved, saving of the 
identifier is initiated or the identifier is output on an output 
unit. 



For data transmission networks using circuit-switching, such a 
20 method is set down in the ITU-T standard (International 

Telecommunication Union - Telecommunication Standardization Sector) 
- Q.951.7, "Stage 3 description for number identification 
supplementary seirvices using DSS 1: Malicious Call Identification 
(MCID) " . The performance feature is used in particular in 
25 conjunction with the preparation of legal proceedings. 

In a data transmission network using circuit-switching the data is 
transmitted in time channels in accordance with a time-division 
multiplex method. Before data transmission takes place, the time 
30 channels are through-connected in a connection establishment phase 
and then remain reserved for the terminal devices involved in the 
call for the duration of the call. The data comprises for example 
call data or video data, such as is produced during a 
videconf erencing session. 
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With regard to the known method, the identifier is a subscriber 
number whose " format is set down in the ITU-T standard E.164. The 
subscriber n\amber is the means by which the calling terminal device, 
in other words the terminal device which transmits the call, can be 
5 reached in the circuit -switched data transmission network. 

With regard to the known method, the signaling units are switching 
centers in a public telephone network. The signaling units perform 
signaling in accordance with a standardized protocol, in particular 
10 as per ISUP (Integrated Services digital network - User Part) . With 
regard to the known method, both terminal devices are always 
situated in the circuit-switched data transmission network. 

The object of the invention is to specify a simple method which 
15 serves in particular to extend the application area for the 

"Detection of Calls" performance feature. A corresponding terminal 
device, a corresponding signaling unit and corresponding programs 
are also to be specified. 

20 The object relating to the method is achieved by the method steps 
set down in Claim 1. Developments are set down in the subclaims. 

With regard to the method according to the invention, the called 
terminal device is a terminal device in a data transmission network. 
25 In addition, the signaling unit performs signaling in accordance 
with a signaling protocol which has been defined for data 
transmission in a data transmission network. 

In a data packet transmission network the data is transmitted in 
30 data packets which normally have a packet header and a packet body. 
The packet header contains details about the recipient of the data 
packet . In this way the data packets can be forwarded in the data 
packet transmission network without any additional requirement to 
establish a connection on lower protocol layers. One example of a 
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data packet transmission network is a data packet transmission 
network operating according to the Internet Protocol, for example 
the Internet. There are also other data packet transmission 
networks, however, such as the ATM network (Asynchronous Transfer 
Mode) for example, in which the data packets are also designated as 
cells. 

The following are examples of signaling protocols in data packet 
transmission networks: 

the protocols of the ITU-T H.323 protocol family, in particular 

the H.225 protocol, 

the SIP protocol (Session Initiation Protocol) according to RFC 
2543 or RFC 2543bis of the IETF (Internet Engineering Task 
Force) , or 

an ATM signaling protocol . 

The signaling protocols for data transmission in a data packet 
transmission network differ considerably from the signaling 
protocols for a circuit-switched data transmission network and have 
previously been defined largely independently of these signaling 
protocols . 

By using the method according to the invention it is possible to 
achieve the situation where the "Detection of Calls" performance 
feature can then also be employed when the called terminal device is 
situated in a data packet transmission network. The application area 
for the "Detection of Calls" performance feature is thus 
considerably extended because a large proportion of terminal devices 
are connected to data packet transmission networks. The proportion 
of these terminal devices in the total number of terminal devices in 
circuit-switched data transmission networks and in data packet 
transmission networks continues to increase. 

With regard to a development of the invention, the detection request 
is transmitted along with a message and/or an information element 
which has been defined for signaling in the data packet transmission 
network. In the case of the development, a detection request is used 
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which was required to be defined additionally for the relevant 
signaling protocol of the signaling unit. 

With regard to an alternative development, an identifier for the 
5 called terminal device is preferably stored in the signaling unit in 
conjunction with the "General Detection of Calls" performance 
feature. Upon arrival of the call request, a check is performed by 
the signaling unit (44) as to whether the identifier of the terminal 
device to be called has been stored. The identifier of the calling 
10 terminal device is noted when the identifier of the terminal device 
to be called (36) has been stored. Therefore, with regard to this 
development there is no need to define a separate detection request 
and to generate this with reference to individual calls. 

15 With regard to a development of the method according to the 

invention, the identifier is conveyed to the signaling unit in 
conjunction with the call request. This action makes it possible to 
note the identifier without it previously needing to have been 
requested by means of a more complex method. 

20 

With regard to a next development of the method for detecting calls, 
the calling terminal device is a terminal device in a circuit- 
switched data transmission network. The identifier of the calling 
terminal device is requested as a result of the detection request by 

25 the signaling unit by way of a network transition unit (used, for 
signaling purposes) to the circuit-switched data transmission 
network with the aid of an identifier request. In order to process 
the identifier request in the circuit-switched data transmission 
network a standardized method is employed, in particular a method in 

30 accordance with ITU-T standard Q. 73 1.7, "Stage 3 description for 

number identification supplementary services using Signaling System 
No. 7: Malicious Call Identification (MCID) " . 
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As an alternative or in a cumulative manner, a method in accordance 
with BICC standard (Bearer Independent Call Control) .performance 
feature set Two (CS2 - Capability Set) is used for transmitting the 
identifier request, see ITU-T Q. 1902.1 to Q. 1902. 6. With regard to a 
5 next alternative, the identifier request is transmitted according to. 
the SIP-T protocol (SIP for Telephones) in accordance with RFC 3204 
of the IETF (Internet Engineering Task Force) . 

The use of the aforementioned standards offers the facility whereby 
10 essentially only method steps for requesting the identifier between 
the network transition unit and the signaling unit still need to be 
redefined. With regard to conveying the identifier as far as the 
network transition unit, it is possible to make use to a large 
extent or completely of methods which have already been defined. 

15 

The ISUP standard can also extended such that it is suitable for the 
signaling in respect of data transmission from one telephone network 
by way of a data packet transmission network to another telephone 
network. This extension can also be used if the one terminal device 
20 is situated in the data packet transmission network. 

With regard to another development of the method according to the 
invention, the calling terminal device is a terminal device in a 
data packet transmission network. The signaling unit or another 

25 signaling unit checks the access authorization of the calling 

terminal device for the data packet transmission network- Signaling 
units which perform such checks are referred to for example as proxy 
or gatekeeper. By virtue of the check on the access authorization of 
the calling terminal device, any manipulation of the identifier 

30 conveyed by the calling terminal device is rendered more difficult. 
With a high degree of probability, the noted identifier thus matches 
the actual identifier of the calling terminal device. 
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With regard to a next development, the detection request is 
transmitted in an INFO message using the INFO method according to de 
facto standard RFC 297 6 of the IETF. The INFO message is also 
referred to as a request. A header section of the INFO message or a 
5 body section of the INFO message contains an information element 

which serves to uniquely identify the detection request, for example 
an information element "Printout" which is used to request the 
printout of the identifier in the signaling unit. This development 
is based on the already defined INFO message. Only small extensions 
10 are thus required in order to implement the method in signaling 
units and terminal devices . 

With regard to another development, the detection request is 
transmitted in a message using a method in accordance with an RFC 
15 defined for the detection of calls. The definition of an additional 
RFC is useful particularly in a situation when a plurality of 
further information elements are required in conjunction with the 
method for detecting calls. 

20 With regard to one embodiment, the occurrence of the message itself 
is actually the request, with the result that no additional 
information elements are contained in the message in order to 
identify the detection request. Alternatively, however, the message 
contains in its header or in its body an information element which 

25 uniquely identifies the detection request. 

With regard to one development, the following data is also noted in 
addition to the identifier of the calling terminal device: 
the identifier of the called terminal device, 
30 - in the case of a call diversion, the identifiers of all terminal 
devices involved in the call diversion, 
the date and the time of the data transmission, 
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identifiers for the signaling units involved in the call 
processing, and 

identifiers which are relevant to the transmission of the user 
data, for example an IP address and the associated RTF port 
5 number (Real Time Protocol) of the network transition unit 28 

and/or the terminal device 36. 



10 



30 



The "Detection of Calls" performance feature is upgraded by the 
storage of the additional data. 



In addition, the invention relates to a terminal device and a 
signaling unit which are suitable for executing the method according 
to the invention or one of its developments. Furthermore, it 
concerns programs which are executed in the terminal device or in 
15 the signaling unit and are used for executing the method according 
to the invention or one of its developments. Consequently, the 
aforementioned technical effects apply to the terminal device, the 
signaling unit and the programs. 

20 Embodiments of the invention will be described in the following with 
reference to the attached drawings. In the drawings: 

Figure 1 shows units of a telephone network and of the Internet 
for data transmission between a telephone and a SIP 
25 terminal device and also for the associated signaling. 

Figure 2 shows units of the Internet for data transmission between 
two SIP terminal devices and also for the associated 
signaling, and 



Figure 3 shows messages transferred on the Internet for using the 
"Detection of a Call" performance feature. 



35 



Figure 1 shows a network transition function 10 between a telephone 
network 12 and a data packet transmission network 14, the Internet 
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for example. The telephone network 12 is for example the telephone 
network operated by Deutsche Telekom AG. Figure 1 shows a telephone 
16 of a calling subscriber TlnA, a source switching center 18 and a 
transit switching center 20 of the telephone network 12. A 
5 subscriber connection line 22 exists between the terminal device 16 
and the source switching center 18. 

The source switching center 18 is connected to the transit switching 
center 20 by way of a PCM-30 transmission path 24. The call data is 
10 transmitted in a time channel, and the signaling is carried out in 
accordance with the ISUP protocol. The source switching center 18 
and the transit switching center 20 are for example conventional 
switching centers of the EWSD type produced by the company Siemens 
AG. 

15 

A PCM-30 transmission path 26 leads from the transit switching 
center 20 for transmitting the user data to a network transition 
unit 2 8 which provides a part of the network transition function 10. 
A signaling connection 30 exists between the transit switching 

20 center 20 and a service provision computer 32 which likewise 

provides a part of the network transition function 10. Signaling 
takes place on the signaling connection 30 according to the ISUP 
protocol. The network transition unit 28 is for example a network 
transition unit of type hiG 1000 from the company SIEMENS AG. The 

25 service provision computer 32 is a service provision computer of 
type hiQ 9200 from the company SIEMENS AG. 

The network transition unit 28 takes voice data, which is received 
in a PCM channel of the transmission path 26, from the PCM channel 

30 and packs it into data packets which are forwarded in the data 

packet transmission network 14, for example by way of a transmission 
path 34 which connects from the network transition unit 28 through 
the data transmission network 14 to a SIP terminal device 3 6 
belonging to a subscriber TlnB, The terminal device 3 6 operates 

35 according to the SIP protocol, see de facto standard RFC 2543. On 
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the other hand, data packets received from the data packet 
transmission network 14 are unpacked in the network transition unit 
28. The user data contained in the data packets is forwarded in a 
time channel on the transmission path 26. 

5 

The service provision computer 32 controls the network transition 
unit 28 with the aid of the MGCP protocol (Media Gateway Control 
Protocol), see RFC 2705 of the IETF. Control messages generated in 
this situation are transmitted by way of a transmission path 40 
10 which passes through the Internet for example. 

The terminal device 36 has an access unit 44 assicfned- to it which is 
also referred to as a proxy unit. The access unit 44 checks the 
access authorization of the terminal device 36 and makes available 
15 SIP services, in particular the service for providing the "Detection 
of a Call" performance feature. The access unit 44 is for example an 
access unit of type hiQ 6200 from the company SIEMENS AG. 

A signaling path 46 exists, for example in a local data transmission 
20 network, between the terminal device 36 and the access unit 44. 
Messages are exchanged over the signaling path 46 using the SIP- 
protocol . 

On the other hand, between the access unit 44 and a service 
25 provision computer 48 there exists a signaling path 50 by way of 

which signaling messages are likewise transmitted in accordance with 
the SIP protocol, for example. The service provision computer 48 is 
also, for example, a service provision computer of type hiQ 9200 
from the company SIEMENS AG. 

30 

Between the two service provision computers 32 and 48 there exists a 
signaling path 52 over which signaling messages are transmitted in 
accordance with the BICC standard (Bearer Independent Call Control) . 
If necessary, a so-called call mediation network node according to 
35 the BICC standard is also included in the signaling path 52. 



It is assumed that the subscriber TlnA has already made a malicious 
call to the subscriber TlnB on one occasion. As a result the 
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subscriber TlnB has applied to his SIP service provider for the 
"Detection of a Call on Request" performance feature to be enabled. 
The performance feature has been enabled in the access unit 44 for 
the subscriber TlnB. 

5 

In order to provide the "Detection of Calls" performance feature, 
the access \init 44 contains a memory unit 60 in which the acquired 
data can be stored permanently, and also a printer 62 which can be 
used to have the acquired data printed immediately. The method steps 
10 carried out with regard to provision of the "Detection of a Call on 
Request" performance feature are described in detail below with 
reference to Figure 3. 

In addition, Figure 1 shows a further network transition unit 70 
15 which is situated between the Internet 14 and a telephone network 72 
to which the terminal device of a subscriber TlnC is connected. A 
transmission path 74 can be used for the exchange of control 
messages according to MGCP and is situated between the network 
transition unit 70 and the service provision computer 48. 

20 

Figure 2 shows the case in which the subscriber TlnA does not use 
his telephone 16 but uses a SIP terminal device 100 in order to call 
the subscriber TlnB. Signaling messages can be transmitted between 
the terminal device 100 and an access iinit 102 by way of a signaling 
25 path 104 according to the SIP protocol. The access unit 102 is 

likewise a proxy unit which checks the access authorization of the 
terminal device 100 for the data transmission network 14. The access 
imit 102 contains the memory unit 106. 



30 
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Between the access unit 102 and the access unit 44 there exists a 
signaling path 108 over which signaling messages are transmitted 
according to the SIP protocol. 

5 Figure 3 shows messages transmitted in the data transmission network 
14 when using the "Detection of a Call on Request" performance 
feature. The messages described with reference to Figure 3 are 
exchanged regardless of whether the subscriber TlnA is calling from 
the telephone 16 or from the SIP terminal device 100. The service 
10 provision computer 48 is involved in the former case, whereas if the 
subscriber TlnA calls from the SIP terminal device 100 then the 
access unit 102 is involved. 

In Figure 3, operations which relate to the access unit 44 are 
15 represented with the aid of a time shaft 120. Operations which 

relate to the terminal device 3 6 are represented with the aid of a 
time shaft 122. Later points in time are situated further down than 
earlier points in time on the time shafts 120 and 122. 

20 When subscriber TlnA calls subscriber TlnB, an Invite message 124 
which comes from the service provision computer 48 or from the 
access unit 102 is received in the access unit 44 at a time tO. The 
Invite message 124 is processed in the access unit 44 according to 
the SIP protocol such that at a time t2 an Invite message 12 6 is 

25 sent from the access unit 44 to the terminal device 36. The Invite 
message also contains the subscriber number of the telephone 16 or 
the Internet address and the port address of the terminal device 
100. The subscriber number of the telephone 16 or the identifier of 
the terminal device 100 is stored in a working storage facility in 

30 the memory unit 60 for the duration of call processing. 

In the terminal device 3 6 the Invite message 12 6 is likewise 
processed in accordance with the SIP protocol. According to the 
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protocol, at a point in time t4 a 200-OK message 128 is sent by the 
terminal device 3 6 as a confirmation to the access unit 44. 

After receiving the message 128, according to the protocol at a 
5 point in time t6 the access unit 44 sends a 200-OK message 130 to 
the service provision computer 48 or to the access unit 102. From 
the side of the service provision computer 48 or the access unit 
102, according to the protocol at a point in time t8 an ACK message 
132 arrives which serves to confirm that the data transmission 
10 connection can be used. 

As a result of the message 132, at a point in time tlO the access 
unit 44 sends an ACK message 134 to the terminal device 36 according 
to the protocol . 

15 

At a point in time tl2, the subscribers TlnA and TlnB begin to speak 
to one another, whereby call data is transmitted between the 
telephone 16 and the terminal device 3 6 or between the terminal 
device 100 and the terminal device 36. The subscriber TlnB 

20 recognizes the voice of the malicious subscriber TlnA again and 

presses a function key on his terminal device which is linked to the 
function "Detection of a Call on Request". Thereupon at a point in 
time tl4 the terminal device 3 6 automatically generates an INFO 
message 136 according to RFC 2976. The message 136 contains a user- 

25 specific information element "Printout". 

The INFO message 136 is received and evaluated in the access unit 
44. As a result of the information element "Printout", at a point in 
time tl6 the subscriber niomber of the subscriber TlnA which is known 
30 in the access unit 44 or the identifier of the terminal device 100 
is stored permanently in a non-volatile memory in the memory unit 
60, for example in a file together with other identifiers which are 
to be stored for other subscribers or only for the subscriber TlnB 
in conjunction with the "Detection of a Call on Request" performance 

35 
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feature. At the same time, this identifier is printed out on the 
printer 62 . Permanently means that the data also remains noted after 
the end of the call between the subscriber TlnA and the subscriber 
TlnB until it is printed out in order then for example to be used as 
5 evidence in legal proceedings . 

At a point in time tl8, the access unit 44 confirms the INFO message 
136 with the aid of a 200-OK message 138. The call between the 
subscribers TlnA and TlnB is then continued, or the subscriber TlnB 
10 terminates the call immediately. 

With regard to another embodiment, in place of the INFO message 13 6 
a SIP message "MCID-REG" separately defined for the "Detection of a 
Call on Request" performance feature is sent. The MCID-REG message 
15 also results in the subscriber number of the telephone 16 or the 
Internet address of the terminal device 100 being detected and 
permanently noted. 

In place of the signaling protocol on the transmission paths 40 and 
20 74, the signaling protocol ITU-T H.248 can also be used for example. 

In place of the method for data transmission between the telephone 
network 12 and the Internet 14 described with reference to Figure 1, 
a different method can also be used, for example the functions of 
25 the service provision computer 48 can also be included amongst those 
provided by the service provision computer 32 . 

In place of the method described with reference to Figure 2 , other 
methods can likewise be used. For example, further access units can 
30 also be incorporated into the signaling between the access units 102 
and 44. The user data can also be transmitted with the aid of the 
access units 102, 44 or the further access units. 
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With regard to a further embodiment, the "General Detection of 
Calls" performance feature is enabled by the service provider for 
the subscriber TlnB, for example upon application by the subscriber. 
The identifier of the terminal device 3 6 is noted in a file. Upon 
receipt of a call, the identifier of the terminal device to be 
called is determined. The file is searched for this identifier. If 
the identifier is contained in the file, then the identifier of the 
called terminal device is noted, for example stored and/or printed. 
However, if the identifier is not contained in the file, then the 
identifier of the calling terminal device is not permanently noted. 
The call establishment is carried out regardless of the result of 
the check. With regard to this embodiment, no detection request is 
required from the subscriber TlnB in order to permanently note the 
subscriber number of the calling terminal device. 



